Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
File:                     vNzosG8FliNAMAycR0e1olGiGcQ.mft (raw, json)
Hash identifier:          FgZuW0AgKnYgc6ik8h9/C4ZMsW/FL+Fr8N0XrrA3gYI=
Subject key identifier:   90:60:22:9C:1A:A4:DF:F6:9A:E7:E0:34:28:B6:10:BB:C5:91:6C:24
Authority key identifier: BC:DC:E8:B0:6F:05:96:23:40:30:0C:9C:47:47:B5:A2:51:A2:19:C4
Certificate issuer:       /CN=A91C65E8/serialNumber=BCDCE8B06F05962340300C9C4747B5A251A219C4
Certificate serial:       3573
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
Manifest number:          3561
Signing time:             Mon 22 Jun 2026 14:54:10 +0000
Manifest this update:     Mon 22 Jun 2026 14:54:09 +0000
Manifest next update:     Mon 29 Jun 2026 14:54:09 +0000
Files and hashes:         1: vNzosG8FliNAMAycR0e1olGiGcQ.crl (hash: qYDR/iC1vj88msuq8mwRCNWBtLP5YLDMKDWq6RDZbmw=)
                          2: 3FEFA562483D11EC82E81112C4F9AE02.roa (hash: pMo/am4pbVZVWLjF2BRkcuubhLlI+aH0WTEo1tPr5yU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 14:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13683 (0x3573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C65E8, serialNumber=BCDCE8B06F05962340300C9C4747B5A251A219C4
        Validity
            Not Before: Jun 22 14:54:09 2026 GMT
            Not After : Jun 29 14:54:09 2026 GMT
        Subject: CN=6a394c91-f4fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9b:d4:ee:b0:25:b5:28:2e:32:b0:ed:66:61:
                    a9:96:a5:4b:ca:89:64:4f:e7:e7:39:ca:66:06:51:
                    0a:fc:65:64:8e:97:50:c3:d1:8c:e2:46:40:e8:8b:
                    f4:f9:18:8b:45:00:41:7b:15:e8:43:a9:dd:69:25:
                    97:0f:1b:14:39:2f:30:73:f3:b1:81:8d:c0:8e:89:
                    c4:6c:a2:b2:92:56:a5:3f:ea:59:be:19:e5:5d:e7:
                    fa:a4:eb:63:6b:8c:fd:6c:8c:86:a7:c8:5d:1e:79:
                    75:70:c0:e0:61:f3:33:12:55:f6:f4:e5:00:f7:1d:
                    4c:69:6a:06:72:a7:41:4b:cc:4d:a6:af:ac:62:4d:
                    f6:6e:94:cf:a0:e5:71:8f:7f:60:f3:1e:33:bc:26:
                    c4:88:0b:75:25:12:ca:2e:ef:ca:a1:3c:01:63:e0:
                    14:f1:95:e3:45:c4:12:d8:2f:42:b1:17:dc:45:20:
                    4b:45:c1:7f:86:d2:13:49:64:f6:99:8a:8c:6e:35:
                    44:75:e5:28:11:27:f7:a1:d2:52:cb:e3:df:f2:88:
                    5d:40:62:51:19:55:51:3b:b4:78:34:37:3e:4f:5e:
                    0f:8d:79:f0:a3:ad:62:3e:e7:f7:01:e0:25:f3:e6:
                    c9:fe:da:58:91:f2:25:dc:6d:1a:6a:ae:55:e7:12:
                    ea:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:60:22:9C:1A:A4:DF:F6:9A:E7:E0:34:28:B6:10:BB:C5:91:6C:24
            X509v3 Authority Key Identifier:
                keyid:BC:DC:E8:B0:6F:05:96:23:40:30:0C:9C:47:47:B5:A2:51:A2:19:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:68:6f:ab:48:ee:4b:e0:fb:8a:39:29:04:ad:b0:dc:c1:83:
         0a:d0:4c:1f:bd:83:19:32:c7:ae:27:ee:ca:2d:50:f6:2e:87:
         29:9a:3d:fc:1c:b5:0d:ef:4a:af:1b:aa:c9:37:05:b4:d4:0f:
         b1:6f:2d:4b:54:ff:cb:a3:d3:1f:41:c6:6b:e8:72:cc:96:bd:
         7d:e8:12:a7:6c:3c:e6:2e:29:fb:cb:4b:ab:17:5a:c6:3f:42:
         0a:c1:cd:1d:af:5e:d2:16:a9:65:18:88:35:8f:d7:53:7d:d2:
         00:f7:65:6e:f4:33:43:b4:5c:35:41:27:62:c2:f1:1c:af:68:
         76:fb:48:a2:fd:8c:23:3e:97:3c:df:c9:79:7b:22:e4:e1:aa:
         cd:b7:bf:d1:5f:1f:5f:e3:24:71:b9:47:fc:d9:8b:9f:83:af:
         f8:1d:89:7d:66:37:31:6b:db:c7:db:3a:d0:98:89:f5:a3:d8:
         be:0a:8c:af:7a:de:4e:6e:d4:3d:b3:19:cb:c1:db:76:d1:65:
         c9:93:de:64:75:fa:a5:18:ea:68:8a:16:dd:dd:33:db:af:0e:
         ad:e2:2c:42:05:b1:70:9a:27:98:65:f4:0e:4c:77:e7:4f:dc:
         43:4f:b4:ee:17:62:9a:a9:60:ae:68:87:0a:25:11:b6:96:89:
         76:44:16:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:17 2026 by rpki-client